CVE-2022-47943

An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is an out-of-bounds read and OOPS for SMB2WRITE, when there is a large length in the zero DataOffset case...

GHSA-6MV3-WM7J-H4W5 Tauri Filesystem Scope Glob Pattern is too Permissive

Impact The filesystem glob pattern wildcards , ?, and ... match file path literals and leading dots by default, which unintentionally exposes sub folder content of allowed paths. Example: The fs scope $HOME/.key would also allow $HOME/.ssh/secret.key to be read even though it is in a sub director...

CVE-2020-36624

creationtimestamp| type| source ---|---|--- 2022-12-22 12:23:28+00:00| seen| https://t.me/cibsecurity/55108...

CVE-2020-20588

creationtimestamp| type| source ---|---|--- 2022-12-15 22:23:35+00:00| seen| https://t.me/cibsecurity/54608 2025-04-21 20:03:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12755...

Pool calls to toScale can revert

Lines of code Vulnerability details Pool calls to toScale can revert Impact A division by 0 would revert the code. If wrongly assigned value in constructor to tokenAScale or tokenBScale, toScale calls would always revert. Proof of Concept constructor uint256 fee, uint256 tickSpacing, int32...

Downcast can lead to overflow and impact the functionality to remove an asset in NFTFloorOracle

Lines of code Vulnerability details Impact When adding a new asset, the index for the last asset will be saved and downcasted on L284. If the number of assets is bigger than 256, the downcasting operation will lead to a silent overflow. Consequentially, the incorrect index will be stored. This ca...

CVE-2022-42888

creationtimestamp| type| source ---|---|--- 2022-12-07 00:41:08+00:00| seen| https://t.me/cibsecurity/54106...

urijs: Authorization Bypass Through User-Controlled Key

A flaw was found in urijs due to the fix of CVE-2021-3647 not considering case-sensitive protocol schemes in the URL. This issue allows attackers to bypass the patch...

CVE-2022-43332

creationtimestamp| type| source ---|---|--- 2022-11-11 11:00:19+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/7146 2022-11-18 02:18:14+00:00| seen| https://t.me/cibsecurity/53128 2025-04-29 15:11:32+00:00| published-proof-of-concept|...

CVE-2022-3486

creationtimestamp| type| source ---|---|--- 2022-11-10 02:46:57+00:00| seen| https://t.me/cibsecurity/52802...

Borrower can close non-existent credit line positions to effectively force the overall status to REPAID

Lines of code Vulnerability details The LineOfCredit.close function is used to close a credit line position. Both the lender of a specific credit position and the borrower can call this function. However, the function does not check if the given id belongs to a credit line position in the credits...

Borrower can mark his line of credit as repaid by calling line.close(fakeId) repeatedly

Lines of code Vulnerability details Description This vulnerability can be summarized in the following 4 observations: 1. There are no checks to prevent calling line.close with id that doesn’t correspond to any open position. 2. The effect of calling line.close with a fake position id is...

On-Ramping Traffic to a Cloud-Based Secure Web Gateway

Though cloud-based secure web gateways SWGs eliminate many problems, it’s important to select the right approach to on-ramping traffic based on use case and protection level...

OSV-2022-1142 Heap-buffer-overflow in onigenc_unicode_mbc_case_fold

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53030 Crash type: Heap-buffer-overflow READ 1 Crash state: onigencunicodembccasefold mbccasefold stringcmpic...

PT-2022-36746 · Git +1 · Oniguruma

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported, involving functions such as onigenc mbn mbc case fold, euckr mbc case fold, and match at...

PT-2022-36744 · Git +1 · Oniguruma

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash state involves several functions, includi...

Splunk Enterprise 8.1 < 8.1.12, 8.2.0 < 8.2.9, 9.0.0 < 9.0.2 (SVD-2022-1111)

The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2022-1111 advisory. - In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user can execute arbitrary code through the...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Case Manager (CVE-2022-40750)

Summary IBM WebSphere Application Server is shipped as a component of IBM Case Manager. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...

CVE-2022-43231

creationtimestamp| type| source ---|---|--- 2022-10-28 22:29:43+00:00| seen| https://t.me/cibsecurity/52249...

CVE-2022-3653

creationtimestamp| type| source ---|---|--- 2022-10-27 18:40:05+00:00| seen| https://t.me/truesecator/3629 2022-11-02 03:13:22+00:00| seen| https://t.me/cibsecurity/52455 2026-01-09 21:00:05+00:00| published-proof-of-concept| Telegram/WoGz2IzAGINpPEDHqGR9MSmsjpXo4h5yA1ILuUmCvpNFAI 2026-07-26...